CVE-2019-19646: SQL Injection
Published Dec 9, 2019
·Updated
An unspecified error related to the mishandling of NOT NULL in an integritycheck PRAGMA command in pragma.c in SQLite has an unknown impact and attack vector.
Other sources
pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integritycheck PRAGMA command in certain cases of generated columns.
Affected Software
7 affected componentsFixes available
IBM Data Risk Manager<=2.0.6
SQLite SQLite<=3.30.1
Siemens Sinec Infrastructure Network Services<1.0.1.1
Tenable Tenable.Sc<5.19.0
Oracle MySQL Workbench<=8.0.19
NetApp Cloud Backup
NetApp ONTAP Select Deploy administration utility
Remediation
Patch Available
Event History
Dec 9, 2019
CVE Published
via MITRE·06:36 PM
Data Sourced
via MITRE·06:36 PM
Description
Frequently Asked Questions
1
What is CVE-2019-19646?
CVE-2019-19646 is a vulnerability in SQLite that mishandles NOT NULL in an integrity_check PRAGMA command.
2
What is the severity of CVE-2019-19646?
CVE-2019-19646 has a severity rating of 9.8 (Critical).
3
How does CVE-2019-19646 impact IBM Data Risk Manager?
IBM Data Risk Manager version 2.0.6 is affected by CVE-2019-19646.
4
How can I patch SQLite to fix CVE-2019-19646?
You can apply the patch provided by SQLite to fix CVE-2019-19646.
5
Where can I find more information about CVE-2019-19646?
You can find more information about CVE-2019-19646 in the provided references.